CVE-2012-1854: Microsoft Visual Basic for Applications Insecure Library
Microsoft Visual Basic for Applications Insecure Library Loading Vulnerability. Microsoft Visual Basic for Applications (VBA) contains an insecure library loading vulnerability that could allow for remote code execution.
- CISA KEV-listed (remediation due 2026-04-27)
- EPSS 3.6% (88.1% percentile)